OOPIF: Data URLs are now rendered in the renderer that initiated the navigation.

content/browser/frame_host/render_frame_host_impl.h

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_BROWSER_FRAME_HOST_RENDER_FRAME_HOST_IMPL_H_
 #define CONTENT_BROWSER_FRAME_HOST_RENDER_FRAME_HOST_IMPL_H_
 
 #include <map>
 #include <vector>
 
@@ skipping 254 matching lines @@
   // If a cross-site request is in progress, we may be suspended while waiting
   // for the onbeforeunload handler, so this function might buffer the message
   // rather than sending it.
   void Navigate(const FrameMsg_Navigate_Params& params);
 
   // Load the specified URL; this is a shortcut for Navigate().
   void NavigateToURL(const GURL& url);
 
   // Treat this prospective navigation as thought it originated from the
   // frame. Used, e.g., for a navigation request that originated from
-  // a RemoteFrame.
-  void OpenURL(const FrameHostMsg_OpenURL_Params& params);
+  // a RemoteFrame. |site_instance| is the site instance that initiated the
+  // navigation request, and should only be used when a cross-site navigation is
+  // initiated by a remote frame.

[Charlie Reis, 2014/12/06 00:18:50]

Let's call it source_site_instance and update the comment as in the other cases.

Please also add:
TODO(creis): Remove this method and have RenderFrameProxyHost call
RequestOpenURL with its FrameTreeNode.

[lfg, 2014/12/08 20:45:33]

Done.

+  void OpenURL(const FrameHostMsg_OpenURL_Params& params,
+               SiteInstance* site_instance);
 
   // Stop the load in progress.
   void Stop();
 
   // Returns whether navigation messages are currently suspended for this
   // RenderFrameHost. Only true during a cross-site navigation, while waiting
   // for the onbeforeunload handler.
   bool are_navigations_suspended() const { return navigations_suspended_; }
 
   // Suspends (or unsuspends) any navigation messages from being sent from this
@@ skipping 322 matching lines @@
 
   // NOTE: This must be the last member.
   base::WeakPtrFactory<RenderFrameHostImpl> weak_ptr_factory_;
 
   DISALLOW_COPY_AND_ASSIGN(RenderFrameHostImpl);
 };
 
 }  // namespace content
 
 #endif  // CONTENT_BROWSER_FRAME_HOST_RENDER_FRAME_HOST_IMPL_H_